codeflare-sdk icon indicating copy to clipboard operation
codeflare-sdk copied to clipboard

Go through the Dependabot PRs in CodeFlare-SDK and merge (where possible)

Open dimakis opened this issue 2 years ago • 2 comments

There are numerous Dependabot PRs. We should look to update where possible and close out updates if not possible -- in the case of closing out PRs which are not possible issues may have to be created to reflect the dependancy issues so it can be tracked.

dimakis avatar Aug 02 '23 12:08 dimakis

@dimakis can we take an automated approach to this? Something like our CI automatically validates any dependabot PRs and they get automerged if they pass (maybe pending manual approval?)

I'd rather us spend the time automating this so that we don't have to continue devoting time to manually going through dependabot PRs.

accorvin avatar Aug 08 '23 15:08 accorvin

@dimakis can we take an automated approach to this? Something like our CI automatically validates any dependabot PRs and they get automerged if they pass (maybe pending manual approval?)

I'd rather us spend the time automating this so that we don't have to continue devoting time to manually going through dependabot PRs.

Sure, the idea is to create an e2e test for it. We can then run them with the bumped version if they pass then we can automerge 👍 It should be started in this sprint.

dimakis avatar Aug 08 '23 15:08 dimakis